1. You have symmetric configured. It has to be in State 5(Active state) or in 3(Standby state). But it is in state "1" which is not ok. You haven't configured "sym-priority xx" - sh server virtual shows "Priority=0". symmetric value has to be between 10-250.
2. One reason why ssl works and http fails could be that http forward traffic goes through SI-A, return traffic comes through SI-B. When you have Symmetric configured, return traffic will fail because it is in Standby state. If you have a chassis, then u can configure "sym-act" under the VIP, so that both boxes start processing traffic. 3Verify the default gateway for http servers. They could be pointing to the SI that doesnot process the traffic. Mirror in/out ports and see if forward and return traffic flow through same SI. 4.Sometimes because of healthcheck, port state toggle, go down and come up and repeating this. Verify log. None of the above work, please send "sh server virtual" and "sh server real" to fix it. Are u using a chassis or stackable SI. --ramesh --- Emilia Lambros <emilial at hostworks.com.au> wrote: > Can you please send a "show server real http <real > server names>? > > Em > > > > > > -----Original Message----- > From: foundry-nsp-bounces at puck.nether.net > [mailto:foundry-nsp-bounces at puck.nether.net] On > Behalf Of John > Willingham > Sent: Tuesday, 18 January 2005 1:25 AM > To: foundry-nsp at puck.nether.net > Subject: [f-nsp] SLB Question, Odd behavior > > Greetings, > > > Here is a config sample prior to my explanation: > > server virtual site.com 10.10.10.10 > predictor least-sess > port default sticky > port ssl sticky > port http sticky > bind ssl www1.site.com ssl www2.site.com ssl > bind http www1.site.com http www2.site.com http > > server real www1.site.com 10.1.1.10 > > max-conn 1200 > port ssl > port http > port http url "HEAD /" > port http status_code 200 305 > ! > server real www2.site.com 10.1.1.11 > max-conn 1200 > port ssl > port http > port http url "HEAD /" > port http status_code 200 305 > > > I can connect to SSL just fine, but not http. It > just times out and > gives a "Page cannot be displayed" error. Direct > requests to the real > servers via IP address work fine as well. > > Here is a show server virtual: > > Server Name: site.com IP : 10.10.10.10 : > 1 > Status: enabled Predictor: least-sess TotConn: 4 > Dynamic: No HTTP redirect: disabled > Intercept: No > ACL: id = 0 > Sym: group = 1 state = 1 priority = 0 keep = 0 > dyn > priority/factor = 0/ 0 > Activates = 0, Inactive= 0 > Port State Sticky Concur Proxy CurConn > TotConn > PeakConn > > ssl enabled YES NO NO 0 > 4 > 2 > http enabled YES NO NO 0 > 0 > 0 > default enabled YES NO NO 0 > 0 > 0 > > As you can see ssl is taking connections just fine, > but not http. I > have not had this problem before and within the last > 2 weeks have > setup 2-3 additional sites on the SLB without a > problem. > > > > Any Ideas or Recommendations are welcome, > > John S. Willingham > _______________________________________________ > foundry-nsp mailing list > foundry-nsp at puck.nether.net > http://puck.nether.net/mailman/listinfo/foundry-nsp > > _______________________________________________ > foundry-nsp mailing list > foundry-nsp at puck.nether.net > http://puck.nether.net/mailman/listinfo/foundry-nsp > ===== Ramesh Pabbichetty 655 South Fairoaks Avenue Apt#A-315 Sunnyvale CA 94086 Ph: 408-738-0149 home 408-941-7377 work __________________________________ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less. http://info.mail.yahoo.com/mail_250
